Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CVE-2024-34402] Protect against integer overflow in ComposeQueryEngine (related to #183) #185

Merged

Conversation

hartwork
Copy link
Member

@hartwork hartwork commented Apr 28, 2024

Requires string input that is longer than INT_MAX to exploit.

Related to issue #183

Requires string input that is longer than INT_MAX to exploit.
@hartwork hartwork added bug Something isn't working security labels Apr 28, 2024
@hartwork hartwork added this to the 0.9.8 milestone Apr 28, 2024
@hartwork hartwork changed the title Protect against integer overflow in ComposeQueryEngine (fixes #183) Protect against integer overflow in ComposeQueryEngine (related to #183) Apr 28, 2024
@hartwork hartwork merged commit d271c2b into master Apr 30, 2024
6 checks passed
@hartwork hartwork changed the title Protect against integer overflow in ComposeQueryEngine (related to #183) [CVE-2024-34402] Protect against integer overflow in ComposeQueryEngine (related to #183) May 3, 2024
@hartwork hartwork deleted the issue-183-prevent-integer-overflow-in-compose-query-engine branch May 5, 2024 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant